Create a publisher mode that does not allow any new user registrations

This patch adds a new option ckan.auth.create_user which when set to true prevents all new user registrations (via site and API). It is false by default.

This is useful in a setup where the site should take no unauthorized user input.

We can't deploy CKAN 2 without this at HealthData.gov.